Hackers use stolen OAuth access tokens to breach dozens of organization's internal systems

Organizations using tools like Heroku and Travis that generate OAuth user tokens should evaluate the security risks raised by those tools.